This utility can be used to manage secure file-based package
repositories (creating TUF
metadata as well as a Hackage index tarball) which can be used by
clients such as cabal-install.
Currently it also provides various lower level utilities for creating
and signing TUF files.